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(57) Abstract: An information provider encrypts a content by a first encryption key so as to generate an encrypted content and 
encrypts a first decryption key corresponding to the first encryption key by a second encryption key so as to generate encrypted key 
information. The information provider provides the encrypted content and the encrypted key information in the form of a recording 
medium or the like to an information receiver. Moreover, the information provider has information for generating a second decryption 
key corresponding to the second encryption key in advance, uses it to acquire the first decryption key, and furthermore can decrypt 
and reproduce the content by using the first decryption key. The first decryption key and the second decryption key are distributed 
to the information receiver according to a key management method utilizing a tree structure in which an information receiver is 
allocated to a leaf. Here, the tree structure is divided into a plurality of hierarchies so as to define a plurality of partial trees and key 
information is allocated on the partial tree basis, thereby reducing the information amount of the key information to be held by the 
information receiver. 
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25 S, ST h (R) fl)'J-7v„ v j t>(Dg/jN*iiy — Kv KITICflfeCD 'J — 

Lttl*£ v 0) 2 -D<D=FS — K<0* T. v t v , <7>/<X ±|C#S 

— K£ v k , v £ Vj (D/*X.tl::#3E-f -ST/— K£ v, PJ— 7 . 

A<ST h (R.) (|3|:iO Lfr#£Lfcl^i§£. v,= v Jt v = v,= v k tLt, v £ 
ST h (r) <d;u— h t#jl*lli«fc^o ) 



WO 2004/028073 PCT/JP2003/012022 

14 

(2) v^v, ££1* N_\ RSifilltSi^I^lrSj,,, £JjP;t£o v^ Vj fc&tf 

n.\ R&m&.-rzmftmisKs.ui&toz-z* 

; (4)st„ (r.) lou- hfei^©y - K7b<#«-r-5Ji^. ±1B(1)I~M3<, ST h 
(_R) h©y - KG>#-fcofci§£. &*Hb Lfc^g<I#£#*?te<z>S#* 

T h £illRU> ±IB(1)(cMoTPl#<D«iS$liiy jg-T. ST h (R.) WiV—Y-OJ 



l*s d(Dll:J:yi«:5^ 0Jx.li d=2 N li 4 <Z>^T? & t 

<65£LTl^ 0 ) s fc*HbLfcl*ft«#* I R|=rtf§tS (3-1) (D «fc 5 |C 

15 1 + ( 3_1 ) 

log 4 (iV)-l 0=D 

log 4 (JV) 0 = 2) 

log^ATM') (2.4 i " 1 <y<4') 

log 4 (^/4')-l (4'<y<2-4' 2»0 j 

log^ATM') < 4 ' < i 2 -4' £>o j ^«HK) 

_! (2-4 lD8<A '- 1 < < /<4 log ^=iV) 

c:t* i i* o<Kiog 4 N zmz-trnm-ztoZo 
d.3.3) s&#ig^s_,, ■ • s^^nmomv st^a 

d.3.4) &m%^<D®mmmo>mv %x*& 



J0= 



ft * *. m ffi (mm) 
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J— K£ v , t Ls v , £;U- h ft £&#*T h ,, ©«J-7KHjy P>^f=Sfi 
%©*££_§_, fcT&o Si5^*T h>1 *©>'- KT?*9. fro/** L I* </ 

ssj.j-c**. ::©fc*»«#ui*±B©£:T©*5}'iii*.s l . J icsjy ^ 
io — k v, 3ft«»»*T h ©u— ^icffias-r***!*. gm#©s^£§ij 

d) fc-f&i. «»*T h>I +fl)y— KT?. *vo/<*±l=#ttL<i:lW — K vj&Il 

- b t-tzuftXT*.! it { (2 k+ <-o - (k + D } z*,*y# 

»»*T hfl f=O^T. *^S_j©3&tt { (2* +1 -1) - (k + 1) } i@-efc^ 0 «fc 
15 otS^i&Sj.j ©§&f*5£ (3-2) 0>J:3(c4:«. Sit uliS (3-2) Ic^-Tfc 
lt©4@t&©$t£«*r LT&frttlffetftt fettle. SC (3-2) iCfcLNT 1 *<S**tT 
1>.£©I*. *^b**S6«*tf£<#ttLfcl*»<*©f«<j&«£*&"efc*. 

x , log, N £ {2h+1 h 2) 4(2<* - 1) log a jy (d + 5) log, N | x (3 _ 2) 

d.3.2) Uftmss_^ - • - , s,^©«fl>«iiyar*tt (Miaftifej*** 

Sfll#^fi^r LT < tt£tt&-**feX>* The Subset Difference Method tWlfii 

ic««a»*j*»*ffii^-c*»**^©ti©wy *fT5 ct*-e#*. 
y, icis&®£«0y at5©T?iift< . »»*T hi , ©y-^ic* 

yaT&*ifc»«#©**s.,iz»LTi o©9^iu*siiyaT*. -© <t g 
25 j < v j, Sjcs,) ciii)aT«iL u #, »»*dSji=«y ar&*t 
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G: {0, 1}" - {O, 1 } 3n *X*&<J>3 & ft* ZWiVAft, 
5 #Lt=2EffiiJBU#£ G L (S) fiL, *rfiiJSP#£G R (S) » 4>*SP»*G M (S) 

^^^?tt^^P#^ES l J^#^t x tl^ofc^14$Glij^fcLTt^^l7'tttt^t>^C 

10 J — K v , £;U— h tt5 MacroLayer(s) T h ., ;U— h^ — 

K v , IC^^U LABEL, $#jy ST* (f§#0 f= «> 5t CD SP # * <& 'J-^lCfljy ST 
&ftfcgfI#<Dlg^<D7'<;UCD§Ijy ST£. -?-<D£B#*(EUU- VJ — K l~ 7 ^ 

^£fijy itsigit^. o£y±ie*gu**©<fc5 icfc* o r$&#*T h> , * 
©y-7ic#jy^r p>^tf=sm#<Dm^s_,ic^K;u label, £#jysT£o j ) 0 

15 LABEL ItJ S|J#*T h ,, * 0) ^ — K Vj©7^^tt5 (H U St &ttl»7 ^ A* 
£iSLTU£o ^<Dtt, LABEL,, j b kir *) — 7\Z%li)m 

*in*nj:i*s«#«>** Sj.jI::»lt«9 atb^s. ) . label,, j 

20 *tS#ft*8j.j icfijy St&il47^^tfc5, LABEL,, j £SP#*T h ,, auu— h 

v jzm^^x ^^tz^^)ULABEL l t^mu^.m±j$.mG^mi^x&.T<omtiimm 
25 ojfijy ns-c&ftfcy- Ki=«y atsn&f i. zommmmizmtus. 

Si5#*T h ,, *a>fc&fl/ — KlC7^^s*<#jy St e>*tfc££s ffl)2o©f; 

-Kffl7^;u*, g l cs) . g r (s) #«ijy STe>*t& 0 ci*tj:y. v,^e> v 
j ics£/*x-L<&y - ki=#j y st-s^^u^g £ffli>TJii#3fctf> & c v , 
iciijy srs^ifc?^^ label, su#*T h ,, *<dj— k v j(D7^ label,, j 
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u (label ltj )*, &#m'&s_ ui i~mv£xz>^ iL u t Ltfflus. w 

^(D«k-5>5:*^$fflL>ttli, Spa-**©**/ — K<& i 5*JU*<#;Le>*ifc£: 
5 gp#* KitW^^I/iBlt (£#) ^fcfUr-r&C t#T* 

£-5o SSlC — K v j <D5fc1fl/- K<D^^;U$ Vj ;!>n I* 

U„ -/ — K v j (Dttffi^I-/ — K<D:7 / <;u (fcfc'Ls Vj §#07^^ 

— hG)7^;U LABEL, $^.xfe*lf=t#. M5J-^^S_,.j icflJ y %X £*t<5l£-S§- (« 

d.3.6) 9M^a&ffiiftffia>«g<J3-c#& ( snei ifcj£s§£ in i> £*§•&) 
*a«#u^«*t-«»fi5fliai 11 a>«iysT*34c=o^-csiw+*. p 

U-f -V* I- 1 OfO^fit^ u<DJl-f 6SB#*T h ICO(^T#X.&o SP#*T h (D 
15 ftX.Tl*&l*« ) ©y-K^v,iL, v , h £-r&^5£ k . (1 ^ k ^ d ) <Z> 

u^*-r (07) o o*y, t<i6it»»*T h .,«fo)>'-Kfl)4'-e, /<xic»» 

20 =i-^J — Kt?fc*o tf>x.l-* u AM „ i: L t , v l1% v l2 , • • • „ v lk lc§J 

y sxe»tif=^'<;u*^^L.T:*>ittf, d+i inJBfti3i.ft£jMG&j8i*-c, 

»«%u T h a>ftl*.T* n U«<**fc*Lt*fr& log 2 N/dT-fcy » 

25 T ±© ^ — K*JU— hit^Sf»*T u [idiots, k 

u T ht , IcoUTt^St . g<§% u fr&^f LTfcfrfclfftl* 

ft&fc^*g#® (^^u) (3-3) (DcfcolcS^o 
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uyfu ^V tl (3-3) 
3t (3-3) dfcL\-c 1 7b<££*L-Cl^<5©li> 3ft (3-2) 4: mtil-^aMbf & 

*ft (= ffl -5. m.^miz o 1% T * © 1 © £ M-*- % Z. t iz % „ 
(1.3.7) *g&©2#*£flH*£*& 

10 l^-S^&tffc&o 'J-^KSJy iST 2 Layer (b) 

K£;u- HttS 2 b m<0 2 #*lr#IiJL. #ffl£*if=2#:*:|:r*tL-C*:fr 
^^jSffl-T^o C©£#. Layer (0) - Layer (b-1) fcfftt? h J — K ttttJB L * 
L>„ Ztblcfc y % SftA<MLTfc< I u £5£ (3-4) „ it (3-5) ©<fc5 

is ft*t» (3-4) T?&y, ««aft£j*»*flii****©**u&«a 0-5) t?s>«, 

5$ (3-4) % (3-5) l=*5t*T*lc 1 -Cl*S0>t*« £ #©SI y S3 T S> *t 

TIN -5 «J-:7©Jl"#-& 2#**lc, Jft3Ki<b-r-5S<S#35^ < #ft Lfcl***©* 



1 + jfo*-' fc =) 4(2*-l)(lo S2 JV-/,) (d-H5)(log 2 Ar-b) , 1 ^ 

1 + Iog,*-6 ^ fe= (d+l)(log 2 ^~fc) +1 (3 _ 5) 



fc=i 



tLt d=2©fc**#**i:» *»fcLfcl*S«#**< | R.I = r ©fc*3t (3-6) 

©«k 5 -So 
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(3-6) 



log 4 (tf/4*) 
log 4 (iW4*) 



(0 < j <, 2 • 4* J&*o y j&S^f ) 
(0<7^2 4* a>0 J;iMS$C) 



log 4 (AT/4 6+ ') 
log 4 (iv74 fr+ ')-l 



log 4 (^/4* + ') 
-1 



(24* +M < /S4** 1 ) 

(4* +, .< j<2 A M fl>0 y flMSHft) 

(4* +l < j <, 2-4* + ' y *HS^ ) 



Mi o<i<iog 4 (N/4 h )£S§fc-tgjl&-c-fc<5„ 

(1.4) £-2f5£<Dtttlhtii£ 
5 HI8 leg I N_U MftLf=^»«*» I R|=r $-^fcLf=t#s 
5£ lc fc ^ T L T fc < t -5 ^ ^ 

f, i8 IC^-TJ: 5 l-s J±= 2 30 = 1,073,741, 824= 1 OM. r = 2 14 = 1 6, 384 t 
Us #*5*T5ffll**B&-SHb7JU=rU XA(Dg|gl±^T 128bit t Lfco 

if ©Ifi-^-it (The Subset Difference Method, The Layer Division Subset Difference 

Method ^mmi®.±j£&&&m-t zm-sit^ zmi^x. fc&ztitz^ 

(^'y^-a>B&-^lbic^fflLfci©-^Sla)'i' ^^^^xlffS) &it*?Z>J5 

20 The Subset Difference Method lt± SB T» 19 (.AUt*-?) :7 P y K £ ftT -5 
A<,C^,I*.^3S b£/*^>— $£LTU5f=4bT?fc& o £0>£fr£h=18.17,--- „ 



» n m ft* WJ26) 



WO 2004/028073 



20 



PCT/JP2003/012022 



L "C I/* <& „ 

New Method kmfrtltzl5&tf*§£yiO>nMMmi~ <fc ZlSfe (The Layer Divi s ion 
Subset Difference Method) T?fcy» C*tl** i^i^^iD^^JKDSI l J ^T(C 

5 New Method using PRNG t #*^*vt=^3* "C & „ 

5 tcl* "**<&) 14tll*I^I± LJSrl^C The Subset Difference Method 

<&5<fc5fc b ©*>-£^#;lt, ^-©i§-&<D^£a?s lti^o hsi::i**srl 

Tl^fcl**^ d=1v b=0 7)U=f >J XA^ The Complete Subtree Method £ 

tc^IcHWIc&So d=16. b=14(DJi£f*. The Subset Difference Method <D b=14 
15 t Ltzm&t Affile (H8-e2O0>££a>fiS*tatt9'CI^«&) . The Tree 
Pattern Division Method |COl*T!*, 7 )\s =f 'J X A & * £ 2 &*<Dfr 

20 4 ,6 =1,073,741,824 l=#&#L\ 0 J;ot, 3#*. 5 # * Ic O l> T (* JJl T <Z> II £ fl! 

■ 3#* : N = 3 19 =1, 162, 261,467= 1 O 41 

■ : N = 5 ,3 =1,220, 703, 125= 1 Of 

2 #*0>fc# The Complete Subtree Method t 7 )\s=J 'J XAtf$B±izmM 

25 

d.5) mmmmcD^ >t >v mm ~> * 
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8l=<fc y IB^^ftQ^&lt^^S^-t^o Sife!&^8 I4rt»l=tt*«4 a ££L 

1»$BH{ft%7 ii±iB(DSIffS*3C<7)3^micfcit^«ff$g^Hi%ic*ff5 

iB«i*i*9i=iB*r*. *fc, it«a«#7i±, mmitonMLt ftznttmrns 
io #s±gi8©a- yicatt-r*. 

I*. SE(0^1i4 ale J; y iHH&i*9|*l<D&'|f$B4 b£«i|--f T?£ 

i5 fci.>(D-e. e&m$B6 sn-si--*- tA<x*#-r. fci£i»&6 *n±-tz 

*§&WT-li. ±m<Dmmttm%ftom i emi3 3S: (The Layer Division Subset 
Difference Method) leftoT, 8 fflttMAlfil 4 a &t/iB$t&i* 9 IC|B 

20 ft3;h.*ttfft«E4 b UtttfJlcli, fcSliif 8l:*tLt, 

hicSjy &*Lfcm-^SI1 O^^SI?*^@lzm-^fflSl4 a £ L TIE 

^-rtii*«fci>o uHt, !EtiJ&{*+9<zmtl!?&4 b<Dfi!$gS<DitJn 
25 #^^S8lc<*^LT*5<m#ffiM4 a (DlffBM £ *il lcM'> * 1± & - £: 

T#5„ 

2fclc, 2{cf6B^(DSIJl5^1lz^^=] >ir>*ylB1i^X^AlcoL>TlftBJ-#-^ 0 fcfc. 

tcDTfc y . c ^-ei±!|#ic d v d - r oM*«aic t -oxmwir 3„ 
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fcfc. mT©Htt5^<CUiB^ICfc^-C. Encryption () l*Rt^fc7 =f U X A. 
5 Decryption () !*&-5§-<(tT;U=f U 4. © t + h . £ fc: . Encryption (51 

ft 1. 31*2) 1*31* 2 £Hf-5§-St£ LT3I* 1 *flf#fl: L X £ gt L. 

Decryption (31*1. 31*2) Ii3l* 2 ££^£1 £ LT 31* 1 L fc^r-* 

£a-#"o £t=. IB# " I " l*2O0)f-^^$tU (■x-'S'A) | (T- 
$ B) 

10 (2.1) = >yfBSI^« 

|B^^M5 O (D»&«i5<Dii-^S 1~S7<DF*3^£g]1 O A~ 1 O E&tfgl 1 1 A~ 
15 1 1 BlC^LT^So fcfc. :ct'(J)a>f>^lt 1f$gi£*l#fr «=>1*fSSII# 
^izm * *i -5 iiiJ3£<D eiH1f $Blc 3 <75 T? fe „ 

H 1 O Alc^-TJ: 5 a >t- >y leftist" £11 S 1 ^ffl^tS, =J > ^ > ^ 

20 ZTfffla >^>^l*-€-*t&tziS^$^.-g,*(Dt?l*^ < » Xmte£<D-T — * 

*tS„ 3>f >7A*gf5 1 tLtli, 3>f>707X$-f-?i< 

IB^$^f=5Sm j r — DVD-R, DVD — RW, DVD-ROM. DVD 

-R AM<tt*©IB^^^S^^)iA/-em-^S 1 £fciJ*lt-£ls]S§-\^ LAN. -f > 

€fiAA^t5 2i*3>T->^^[^ffl(DfiiA*A*-r'g>^m-efey. mi o 

BlC^^-cfc5l=s 3 >^>»i/^#SlAT?ifo§li-^S 2 ^tt^-rSo =1 > T" > ^ ^ 
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Bf A£i g£S 5 3 1*^ 3 >7lgfiA$A*t58It-fe y . 0 1 OC 

P = Decrypt ion (Encryption (ff It (D-r — ^ P , 3 >"T- > X V B&#£l A ) , a 
5 >-t>^^#SIA) 

3>f> , >lf^bgt5 4li s =J>T->^MMA (il-^-S3) *ffl^T3> 

0 1 O D|C5j*-r«fc 5 l=» <1#S 4 = Encrypti on ( =1 > x > ^ , =l > t- > ^ Hg-^-M 
A) T?fe5. 

10 fcfc* Z(D«l]T?lia >T > 4 >Bt^g|A$ffll>-C3 > J r> i ;/£lti&l£-*Mb LTl> 
=> >T->y g#£Ht#'lb-r"i>!&^l*!&-f L=kfcl^ 0 0Jx.U£, a>^>^S 

Bt-^fitA-eMlbL-cm-^S 4 LTfcB* LT*,£l^o of- y % nz-ei^d r=i 

^^Bt-^sisffl^-ca ^^v^SB&^-^b-r^j tit. ^>T>vo>m^it\z 

Bt-^®A*^m5 5 I*. 3 >T>^m-^SlA$Bt-^ib-r^fca60^ISft<DB&-§-^l 
B, fcAa-f £>gg-Cfcy . N fli<DB&^§-@B B 2 . • ■ • B N _,. B N £, 1tr20>ltt 

20 0 10 E IC^-T cfc 5 IC % m-^S 5 =©^iB, | Bt^"MB 2 | • ■ • | Hf#M B , | • ■ • 
I Bg-^filB,,., | H&#SlB N T*m$*lZ>o -^^HSfctDBt-^-glB, ©J&B^fr-feMCj; 

25 ®Bt-^<b^S5 6li, m^S 5 £ L T *L 5 Ht ■*§•£! B, -H^S2£ 
Lti&ti^a >T->r!'tt#£A£llt-9fcL» «/ 9— Header (B§# 

SIB,) LT<i-^S 6«!:LTtil*-r-5o 01 1 Alc^f J; o lz % 

li-^S 6 = 

Header (B§#glB,) Encryption ( =3 > yfiHHI A , Bf-^filB,) ) 
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| Header (Bg#SlB 2 ) | Encryption ( 3 > *r > V A . Bt#SlB 2 ) ) 

| . . . 

| Header (Bt#$tB ,) | Encryption (a >T WS^MA, Bf-^gtB,) 
| . . . 

5 | Header (Bb#MB h _, | Encryption (a^f^^SfiA, R§-^$t B N _,) 

| Header (Bf-^^B H ) | Encryption (3 >T" >V&^m A , Hf-^B M ) 

iI-5§-S 6 =Header (8g-S§-^B) | Encryption (3l/f ^'^SfiA, Bt#MB) 
tit. 

io ABftflHS-SttSBs 7 1*. B^Hb^ftfca ^^ont-^glB.-eBg-^ 

<JJ|fcMlel£ % IB^H-^*^^S5 7 li. H#S 4 =Encryption 
3 >^Bt-§-SlA) It-^-S 6 =Header (Rf-^B) | Encryption (3>t- 

>>^#iA, Bf#filB) £$S£L. ^ftlcx^ — ITIEfc-Sf £ttJD L7=*<D£1I 
15 f S7tLtlilAt4, «fc oT, @ 1 1 BlZ^-t" <fc 5 iI#S 7 I*, =I >T > 

tg-^A&tf^y^-icx^-iTiEft-si-SilJn Lfcii-^-cfcy . 

S7 = Header (fl&-i§-®B) | Encryption (a>f W^f-^A, Bg#^ B ) 
| Encryption (=l >f a >"T > % V Bft-^tt A ) I ECC 

20 tS^f^S. ECCIiX^-fljE^UfeS. 

IB$igfi5 8l*, £fig£*VfclB$tiI-S§-S 7 7.*? DlCiaitL, XI*. it 

lci2^-r-5^MT?fcy . If U- tfptaS-^U— tf fig *-<5>o 

(2.2) zi>T"W^^^m 

£ ft ©a >f i/'ysigte o do thrift tuj-f*,, m 1 2 1± =1 > ^ > 

a)£-S&am-^-a)i*3^£EI 1 3 a~ 1 3 B&t/EI 1 4 a~ 1 4dic^l-c^«s 0 
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A? Dlcf3^£*t-Cl>-51t*a£f&*3*o-C<I-S§-s 1 1 StH*-T-i)o m^s 1 1 
li N 0 1 3 A 5 

S1 1 =Header (Bg-l-MB) | Encryption (aVf^'VMA, Bt^-glB) 
| Encryption (3 ^T^^, 3 >^Bg#SI A ) | ECC 
5 T?a£*l<!>o 

x^-fT3Egg6 2li, A**+tfc1i-^S 1 1 (DX^-ITiES^Ta^m-efcy » 
m-^S 1 1 4><0 E C Cl:I-Juti7- ITiE«!ig|*II^T-r<So f Lt, x^— IT 
jE&<EHi^£*I-5§-S 1 2 £MS 1 3 |C^ltT-5-*V^*tM^#^S6 4 St; 3 > 
f >7t^ri6 ii-^S 1 2 l*M«B l -Clie#fl;2FJh.fca >t-> 

10 y^-^SlAOTT 5 — £ y S 1 2= Header (Bf#iB) | Encrypt ion ( 3 l/=r 
>y^#@A, Bg-^SIB) T?j*£*t&, fl|#8 1 3 (in >^>^Bt#g|A 

T?Bg-^-|b$*tf=3 >^(D-x — ^ T' fc >-J s S 1 3 =Encryption (3>f 

«B«M6 3 1*. M'ltmtitROlMB,. B„ • ■ B JS B H , 
15 Bik^to^y? Header (B,) % Header ( B 2 ) , ■ ■ ■ % Header (Bj) , ■ ■ • » 
Header (B B _,) s Header (B„) L T *J < Sfe § . fcfc* ZCT*l*I31i 

t- > y si a ©ng # it m o> fe^m b , t m ± £ t* rt * h x i> s n £ <o « * *- 

20 IzMttBjfcBffi L-Cl^* : 

P = Decryption (Encrypt ion (ftjtO) -r — £ P , Bg^MBi) , ffi#@Bj) 

Header (Bf-S§-®B,) =Header (litflBj) 
25 ±ffi©B«3^«S:-r'5J:5l=*«B J fc*fl>^^y-*#||^«1tt(= (S£gE 
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I = & £ ^ * ; u 1» $& -e ft -5 . 

|B H I I§iB n *<D^'V^— Header (M&lB,) | Header (g#iB 2 ) 
5 I • ■ • I Header (tt#^B M .,) | Header (^-MB,,) $ffl*-t-^ 0 

SHt#^M6 4 It, II -5§-S 1 2 = Header (m^SlB | Encryption (a >T">^ 
SfiA, Hf^gtB) (1#S 1 4= (MSIB, | MB 2 I • • • I 

B H _, | m-^MB,,) t*0)^ V ^-Header (t^iB,) | Header (&#g|B 2 ) | •■• 
| Header (*t#gtBj) | • • • | Header (^-^SlB,,.,) | Header (M-tSB,,) £ 
10 A*l£Ls #7* * 7.0 D*N&^^l?of= Header (Bg#&B,) £#£^#£31^ 
5 Header (m^Bj) tf-St^ £ £13^, £ B#|Z li^SI B j l^TT 

Encryption (q^fV'ygflA, ll^iB,) £*g-^-f&o OfjiJ. 

A = Decrypt ion (Encryption (=3 >T A , B§-^&tB,) ,II-J§-gtB 

15 0) t>-£&&X.XmffL. H11 4 C £ o |CM8 1 5=3>f 

fcfc. Ht^o>«k5iciB1i^M6 3icm-^SlB J ^<Z)4,a)-x?i*<c< % MSt£trH: 
t/^f ®t A #ffi-s§-s 1 5 t Lta >f ^^I^ite 5 ft 

a i/f l/'yt^^f 6 5tt. HI 1 4 AlC^-f il^-S 1 3 =Encryption (=3 
, =1 > ^ > */ Bf-Sf SI A ) £ , i 1 4 C IC "f if -51- S 1 5 =Decryption 
(Encryption (3 ^=r > ^tg^St A. B§-f§-gtB,) , tg-^&Bj) = =1 >7" > '1/ ffi-^ 
25 01 A £ A2J £ m-^-S 1 5 ^ffll^tifS 1 3£&-5§-L. Decryption 
(Encryption ( n > > ^ , a > -r > ^ B§-5§-gt A ) . a > x >^ ^#SI A ) = =J 

>^ >y £<t#s 1 6 1 Lxmx-t&o n±mwe 6 i*n >T>vm^mw6 5 
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(2.3) =1 >-f >y!E&*fiS 

sijRt* (x^^^s 1 ) c commit. mftitm^mwtMiz* ynt>*iz>tf* 

< 1 ol*tg-§§-^7b<#£L, fro, :p|££ltWS;h,TlNfcl^mi::oiNTI*l 

zi^^r^^m-^SlA^^^L. ?S 2T*^^R;*;}^f::m-S§•Ma>^£• 

|wJl■3" ■S.^TroS-^-SI Bj *s P =Decryption (Encryption (ffi^OJ-x — ^ P , Bf 
§IB,) , m-^SlBj) &Mtz?WB^mB l Zm^Xm^itL. Encryption ( 3 > 

§itL, Encryption ( 3 > t- > ^ . 3 > % V Ht-^SI A ) £5fc#>£> (X^'J/^S 

4) . commit, m®s *«ss«**«fr3. 

Xf'^S3atfS4t'*ft^fc Encryption (3>f>^g#lA, 
f@flB,) Encryption (3 V^rW, 3 >T >^Bg-^SlA) |:*tLti7- 

fLt, Xf';^S3, S S 5 Encryption ( 3 > ^ > »y « 

fiA, B§#SIB,) Encryption ( n > ^ W , a > > ^ B&-^SI A ) Mtf (c 

?imxiifcif, flttta&MU:* y fr*>*i-5. -5Lt« Bt-^-'lb^ Hfca >t-> 
i y & t; * 0) ft # fit <& W 41 -f * * d I c IB ft * *i 5 ■ 
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hlcfljy &*tfcB&-5^ B, <b LtlW^ Ut^S2 1) „ 

t6*lt^5'J-7 (Z© 2^ffl0)'J-7**i«)T r&t8Hb'J-7J tt?^. ) 
£^frejta>SP#*T h £ 1 Oltf, ST h (JR) Uf^S23) „ 

c^-c. ST h (R) tits SP#*T h <o;u- h tismb'j-7$g^tg/u±0 

l*£*0> 2«-^:*|c^^ttT^T : fe^t>'S:l>o o£y. 7f v^S 2 1 
£f fr o 7i ^ T (D 25J , ^^M^t^fo"Ct N 'So 

s t„ (jr.) fpoz-D^m^iit^—y v, % Vj *-*i<=>(D&aiy — Kv 
oro^f-y — K©*-e» v t v , ©/^x-tic^^E-r -s^y — k* v k , vtv,©/** 

±t#$t^^y-h*^v,i:t§„ (&2Mb'J-7tfs T h (R.) *tioL^ 
L & l^lf-Hs v,= vj. v = v , = v k i: L, vl*ST h (JR) <D)V — hi^fotl^ 
25 £<> 
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0>5ft(::J: y ^#*-&s k ,,. S,,j icfijy ar&^TLx^Bg-^M^I+^L. Bt#M 

y- K v «fc VTK&Wiir&ZMKT^oy - K££Tl&*L. v £*Eft 
it l J— (Xf ';^S26) o SfcKs ST h (R_) to<D)\>— h ^ — K*<^^ 

vz&zm&tz* )\>— YJ — h*mtti::ttaiby-7£#fcfl!s(&^#*T h *><£Ta) 

2#**lz#£-f &rt>S^*¥lJ5£?-& (^f'^S28) „ #£-r&J§^ 
10 -^s XT' * 2 7 T?S T h (R.) F»3 © ;U— h ^ — K tfftlStl it U — 7 T? & L^t 

JpJ^**Lt=Jt-&» *&3li*XTy :7 s 2 A^MyftfecD^a^b'J— ^$51^LrPi# 

**l::?f£Lfc < tS-itzt # (Xf -^S28 ;No) . «!1 9 1± St 7 "T £ o 3 >t 
15 >'?tt#ttA®lft#1b|::mt&4l£l&-?ttB,a>J|lftl£« Xf-^S2Ui;Xf 
? 2 5 TJS^^Jtt (Xli^^l/fr t>tm) *j|t ft*. 

(2.4) a i/T>y??£*aJi 
20 ^^^^©^1X^8 6 1 let y !H$sii?&#i£*3i&*i& (^f^s3D , # 

Ic. 7.^ryZfS 3 1 TM#£ftfclI^I=** LTi^— fTIEi&II: 6 2 lc «k y 17-ff 
jE£fT"5 (Xf >^S32) o 

3fcT-f X? D4i|c |3^£ ^XTL><i»N flO^^y— Header (Ht#MB,) <D 
W£|fEa*tfMr-f ^MiOlfiB j ©'s?*— Header (&^Bj) <Dd!>ft 
25 < t i, 1 •5frgfr£H'<'5 (Xf^S3 3) „ 

-r-5Jt-&, *(DIS£ig®lil?££I¥1*Sftt=*<0T?fe£>££ lefty, -SfeLfcft 
■r ^ X<7 DfiiJtD'N^ ^—Header (DgfiB,) ClftJS Encryption (=J>T>y 
m-^SlA, Bg-^-filB,) £ s m±mWM<D^V? -Header (ffi#®Bj) iCfcUfc-T* 
1g-§-SlB J -em-^-^«)(X-X'i' 3 4) 0 O* y ,3 > t A = Decrypt ion 
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(Encryption (3i/^:/y«#ttA. HfH^ftB,) . «#&Bj) 1* 9 AB^fTl*. 

D _L <D fls 3 >f>^T?fc§ Encryption (3>"r>y, a > ^Bg-^-M A ) 
5 £tt-*f-*"£ (Xf«^8 3 5) o O^y. a >*y = Decrypt ion (Encryption 
( n > -r > ^ , a >^Bg-^MA) , n Vf V^tti A) fcl^5*ia*fHV 

S 3 6 ) o 

fcfc* x^y^S 3 3 Tf-atS^'^- *«Mo*N&3tCUJi-&li (X^r-v^s 
10 3 3 ; No) . *<Dn±mW.lz * *?|**<ff rT **ir Z £: Icfc tj „ 

(2.5) ^»^^^©ns^fii<DSiiy aTi=sntta*4j***«ffl-*-**^ 

15 h£#BHLTlftBJ-f <&<, 

(Xf7?84 1) o Jfcl=, 2 b li<D 2#** IC^ft&^TO)/ — K least ttffl 
S»07^S«ljat« (Xf^S4Z) . 1i Ls 1 &g<D 

y ssT6*ir^*y- K i*»*f**t*. fir, ftma>sis#* t„£51 

20 (xf^S43), SW$4xf=fi»»* T h *a>«a<D/- Kv,*JU— b-ft 

T h> , (Xf -^S44) . 

LABEL, (Xf^S 4 2tflV ^ffll^t, M#lfi-& S_,., 

|CRf-*§- (H^-) ttL,..*«y StS (^f^S45) o d-T?, *l*SP#*T h> , 

25 *(Dffm(Dy- Kv (fit. ^..©^-hy-Kvitti^o . 

f&to[zmwimikrfL&G0)\ji& : 7'<)i> label...^ Lfctt, *-<&tH*i£ 3f^ 

Lf=SfflflSP^$G L (LABEL lt ,) , * G, (LABEL,.,) , £ G„ (LABEL,.,) 
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G i (LABEL,.,) A^I7 st-JU LABEL,, »<7)|H] UST %>tl>tc J — K © 2E fiOJ <D ^ 
G H (LABEL,,,) A*7*;ULABEL,.,©#jy MSTfcftfc^-KICfljy IISTS 

5 G R (LABEL,,,) A* ^ LABEL,. .©#] y MiT fcftfc / — h'lDSI©?/ 

Si$#*T h ,,©;i/— i-y — Ki=My sr&ttfc^^^ label,*^*^-?©^ 
- KoD^^^^^nasLSS^fifesiG^ffiLN-csjy sts. zcdm**!*?-/ — k 

10 * T h ,,tf©±tfl)/- kic^^ju&w y ItSCt^T'tS. 

m^l". T h ,, t*J©#y — KIC*J y fc+lfc^'^U LABEL,. Lt 

L,.,= G B (LABEL,.,) SttStS. d ©fil#M#lg£ S_,,,|rflJ y g£ T e>*l&Bf# (tt 

■*§•) Sl-r-fc^o 

25?|=. Xir^S 4 3 ^M4R*Ht=SP^* T h *©Si5#* T h .,-e s Xf^S4 
#«-r-l)«^l*^7 L ^^S 4 4^HJ .5fcf£^3;h.Tl^ci:l>SPfl-* T„., *»iRL. 

H*a>*a»*fT3. #£LfciM§^li* mz x 2 b ffl©2#*4'lc#£-#-&£T© 

&mm-?% txf'^s47) „ #ttt^^i*> xt^s4 3icMy , 

20 SW**fCU3&^fiP»* T h «I«L. PH*©4BHB*fT5. -7a. #ttL<t^»* 
li«lS$*lT-r-5. 

tfl£*tf:: ! &SPfl':*:l-*t It The Subset Difference Method £5SfBf § © T? . IHil 
The Subset Difference Method Icfcl^t, Gr^ftM-S^tofe^ (Bt#) 

slaty y ^ tic & feists *ej« is £kh^ it S4gtit«t Lt^^7^^ 
iffg^&m-^^^^to-sw^m^ iog 2 (n) +100) (giftisLSfe^jsiKDaiTD^ 
*fcst^5)iiSMt Lt^fc4«, #7j5e-eiig*:d + 1 JSC*, 
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tt * fl) IS 1 

m ih * m & £ m s n s i= # #i t -c s & © # * £ & £ -r * * a £ » 
mr ib n # jji * a> «• * i = m « *a £ « y m r £ ¥ a t » 

15 fr&fc&;ii:£!|#m«i:-r<5>»3fc<D®fflf&1 IIlcfB»0M3I*>*T- A e 
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(Header Bf MB,) 


(Encryption =l>r>*:/ttMA. Bt^MB,) 


s^vif — 
" (Header Bf^rilB.,) 


(Encryption ^>^r^W.^rMA, ffi^MB 2 ) 



<1#S6 J 



(Header B§-5f@B N _,) 


X>£"J^-> 3 > 
(Encryption a^^MMA. Bf-^giB^) 


/ vy$f — 

(Header 0f-5§-@B N ) 


(Encryption =C?:/?tt#£A. Bf^-^B N ) 



nn 1 b 

{I-^S7 -< 



(Header BS^jBB^ 


x>>7'j^->a> 
(Encryption a^T^WmmA. Bf-^B,) 


(Header lg^-ffiB 2 ) 


x>^u^-> a > 
(Encryption □>f> , >i§iA, Bf#^B,) 


■ 


(Header Bf-^-fiiB^,) 


X>^iJ^i/ 3 > 
(Encryption 3>r>^!S#®A. If^iB^) 


(Header Bf-^B N ) 


x>^y^> g > 

(Encryption a>^^^«SlA. Bf #8tB M ) 


X>-^i;^>a> (Encryption =3>T->y, a> J r>^Bt^-^A) 


l7~3b^f-f>^ =l— K (Error Correcting Code) 
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13A 



(Header Hg-^B,) 


(Encryption =J>r>ytt#$lA, BfM-^B,) 


(Header Bg-^B 2 ) 


(Encryption 3>fy;fifiA, B§-^giB 2 ) 


■ 
• 


(Header flHMte^) 


(Encryption =3>T->yffl#ffiA. Bg-Jf-ilB^) j 


^v^y — 

(Header Bf-S§-^B N ) 


X>-J?iJ^>3> 
(Encryption 3>^>^tt^g|A. I©-^MB N ) 


X^/^7iJ^>3> (Encryption =3>T">'.y. 3>-f->»VBg-^-MA) 


l7-3U^f-f>^a-K (Error Correcting Code) 



H13B 



^■v9 — 

(Header BJHy&tB,) 


X>^iJ^i>3> 
(Encryption a>T->y»MA, flf-S^B,) 


(Header Bg-^S|B 2 ) 


X>^iJ^v3> 
(Encryption ai^f^^^A. OT^B 2 ) 









X>£'J^>3> 






(Header Bf MB^,) 


(Encryption = 


















(Header 0HMte„) 


(Encryption : 




Mb n ) 
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H14A 



(Encryption Ulrf^y, 3>f>7Sl§iA) 
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mi4B 



fg^S14< 



(Header ffi^B,) 
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— 

(Header ffi^B,) 




■ 
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(Header StiB^,) 


^®B M ., 


(Header &-^B M ) 


«SlB M 
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